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(54) FAST PACKET ACQUIRING ENGINE/SECURITY 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a cracker 
monitor system of a simple system configuration to 
protect an LAN 1 from attacking by a cracker by 
automatically detecting the attack by the cracker to the 
LAN 1 with no burdensome limit on communication or 
experienced engineers. 

SOLUTION: A sensor 5 is provided where a hash 
algorithm is used to sequentially acquire IP packets 
passing an entrance of a LAN 1. The sensor 5 quickly 
detects various attacks by a cracker to the LAN 1 based 
on the acquired IP packet. The information related to 
the attack which is detected by the sensor 5 is provided 
to a director 6 controlling a fire wall 2. The director 6 
controls setting of the fire wall 2 according to the 
supplied information and prevents an IP packet related 
to the detected attack from entering the LAN 1 . 
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(57) mm 

mm lan ncw-rs ^5 ■y^-^sos^sfii 

T*^'y*-fr£©&£fcttT5L AN 1 ©SH^S§ 
£ i: t? f 5 ? 9 -y A -gffi i/XfmS, 
BRfc^S] /\'^a7;WDXLW5*t?, LA 
N l ©ADP^^SS I P^y-y h*j&fcflM#?5 

tcgo£, LAN 1 ic^-ra^^-y^-sb^O^Sifc* 

p^-y l an i Kjix-rso^ffiih-ra. 




^^Lft*fc#®£Wt-§, ±12, H^ncIBS 

±12, If 1 &tf/71fMt± 2 tcie««OiH» 
U-^Jffl$£^8 0%tc^lrc\ IMSltoo, ft 

[USE 5] 4y9-*v Ytoy>^j*y>JTmiL>7=> 
•y+y^fcWfctl*** ftfc, TCP-Syn Fl 
ood, Teadrop, Lands Pingof D 20 
eath, Distributed Denial o 
f Serviced ftft&tf/Ti^fiiSltfTS^fc 
BWi: Lft±H2, If^H 1 &tf/7Sti 2Rtf/7!rMtt 
3 m/ft'm 4 (<:3E*©jHIJB££«il 0 

[11*316] Y>*-*<y r-±©ffi{g£f'JfflUT, OS 

LT, /l/-F©/U7-F£*®**4ir©#*#e<: 

£ftSt£*rr 5 ±12, f!OT 1 Rt>'/7^M!i 2 fttf/T'j 
S(± 3 m/Timii 4 Rtf /75M(± 5 tcf2gi©ffliifJ!£ 30 

mm. 

[00 1] 

%-(y$-3l^Y*f\Ltc%<>jYV~>7 (LAN) 'N© 
&S£E8tU ££lc(i*©#S8*^*'y r-7-*£« 

[fi£*©M sa^, £iift£©iiH8rt£t3g2nft 

*>yr-7~? (LAN) ?©£<*V>*-*'y r- 

(cjgn^n, fi&©*7 b7— j'^toKTo^aitaiw 40 

5 0 c©iHr?l;S\ Hftfcu RffliO S I pgStr/l/tft 
TIP (Internet Protocol) ififS^ 

§ 0 ^lt, tmvhy-tmmoYyyzx- 

hMtc±fcLTftj£'f&7 , n r-n/U (I p©±f£©7n 
hn;l/) t LT, TCP (Transmission 
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[0 0 2] COa<0*'J/ K7-^ttv 4y2-*vY±. 

©-tr-/^©*^ r-7-7&££©P^T\ %m>w& 
ifSo ^ tJ i: •) * n x b 5 ii T* 1 5 i: v 11 9 * U 

C ©£ 9 ft* y F 7-^7 ©ffiH^fr ? fefcOfXr A fc 
LTJ±, fiULJ^f^-y r-7-7©ADP 
fc, 77-Y^7*-;b (I¥L<&77^7*-;1/©^ 
^J&tfc-arfc^^tfa-^) ^It/ci/XrA^en 

L©77-r-V7*-;Hi, ss^L:i6*7h7 

- * WSSft H ft a£©iHI * y F 7 - * i: 
^©^^©RmTfcnsofclfiitU ^nWJtoHFor 
£ ftftlfi©&£* >y F 7 - £ F*3 1 * ©HSP t ©fST-fr 
5Cfc^ , e*5«t7fc , fat>©'C*5o iI©Jf£, ffi± 

■rsins©*^ mtfi p^-yFtc^snsam 

7C I PTFbX^ftl P7F b7, 3fcft#-F#^ft 

■>*-;HcJ;ntf, *yF7-?F*i©ft)£©I P7FU 
X**rr«*XF (nytfa-£) , &S^ti*©#7. 
F ©#£©#- F#%KW*SS*fflJfr5©7*-feX£» 
ihbft 1 ?, *>yF7-£©ttaiS©1$S£©I P7FUXW 
ft© I prKU**^©*? F7-*^©7$"te**SI 
ibLfcOTSCfctfTftS. I^T, *>yF7-^\© 

1 A*n±f ?» mm- $ <»mm ir^^t-m. 
m,xmmcmj£Lxmi£, *y F7-^©#ii© 

[0 0 3] jgtc©J;54*'yh7-^©****tfJ 
<r5ftA6©i/XxAfcLTti, fifcfc &HL<fc^T3 
*>y F7-^©A9Ptc, fiAW>XrA (^T*ti 
intrusion detection syste 

m, ^(imxmmmt-yft&mzmmh 

ft-|J:ft3>lfa-^) ^tft^T-rA^&nTV^ 
§ D c©gAftfcP>XrAfi, fc&A^feUxmsnftS 
^©^H#{c^O/^-y©ilfi^*-y b7-^F l 9^ 

j§S-r5t©T?feSo ^^T% ^©^tiitcti, -r- *© 
«fc J: tf r - ^ ^ - x ©#P,t^©0f^%g1- § ^, Efe 
S/Mrbft ft * ©It ffi S^VT * n*56 Wf 1" § , s!cv ^ 
l±, ^nu^©l^^nft®fl©^*7 F7-^!^i: 

SOU P^^r-y htfjSa-r5ST©ft^!35S^©H 

?nft<T(44^*l^ ®a©/^7 b5llgffl©7- 
;I/T*fe5X-7 7- (s n i f f e r) SSWiBP F 
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lA&^Xri^JcoTfe, *vh7-^rtt*yb 

iDMT^tctJ, ffiltJ;5fcf5*'yh7-^rt(D 
&*X htfffOJ; o %®mm U feL< ttflgfocJI 
*>yF7-*PW©<fc?*1tfH£fi^T 

fcV^Cfc&££&£«fc%ftLTifc£L£tf 10 
ft If & 5 fc^ U & "5 fcSfcSliKffitfc: i; o T tlf^t 

[0 0 4] *yh7~*©Wai!gfcl±, ^ 

l§, &|i£ftSfMJItLftlM£fB, &8i&ffi# 
££§£A&7j7^3Xh£gtS&©t£oT^ftc 
Sfc, ±E©i?&$*©7 7^7;)— /Wi, 
^tt©&5ffifH£t<T»L£?tt£&©T-;fc 

So fse-3-t\ rac<toit±2ftftfKi©aft«:, ^© 

®fltf ©i^t J: * fe (DT'tiZfrGMc 

a*t>&1M*Wte8H$2ft3o OS!>, *'yh7-* 20 

fc^aPfcOil^Og^S*^W±(cSiJEiBStiS 0 c© 

±©*ra PHift* ffisi^u- - vzmm 

k©T*£-3fto 
[0 0 5] 

77^*6«msi^ttu aii^^a± 30 

KfHIS L ft D , Slt&fFf <fc S#*r*#g i: f 5 d t 
F7-*©iS^£lilSCfcffT£5?7'y*-- 

i->XrAll MpSift^jifiStTSft&tc, IP (I 
nternet Protocol) (Cg^X lifter 
5*-y h7-£©At)nKfct/ v t^At>n£iIifrr § I 
P^T'y h«^M#tTJI«ftlC{£ff U ffiRfLft^ 
a© I P/^-y h^^l-SilfcfcitJ^'y h7-^ 40 

js uftF/fs©Ma^T a Mg^s-t ^i^ft c t mm 

[0 0 6] tfcfc^ *Ba^#§*^7'y*-fc:<fc5 

mm^mmiLkt^h. £<©s$t 
©#shu ^n^n^©JSf*©^fcB#^j«)^afi$n 
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*IT3;i£T\ ^7'y*-{-i«fuia^'y b7-^7-N© 
#gt<t»)ig^4jl!ia (W*.tf*-y h7-^^a#a^ 
5CfctfT*t5 0 ^ 7 -y 

fc. ^Ji©- I P^y-y Mcllllt51i?B£#£LTft< 

[0 0 7] C©J;5&*fglS©^XT£fc«fcftt;f, ^7 
*y#-fcJ;5#£*y7;l/*^ATl8»?§3©T% 
©Mftl^ftSftfti:^ JlO*© 

Rfffin^77^^ Giftiasw) mmm^ 

^O^Bfi-fffS^OlKK, ^7'yA-tc.t****^ 
SJSftfti^ftB&t, *-y b 7-^7 ^©^i: ©Iff 

fc<tntf, *-y h7-f tj*-r«^^v*-^&«a» 

A1i^T? ^ 7 >y *-jEp 5 oSStJtf 5 * >y h 7 - ^ © 

^*^3B#S(±, tuta^-y h7-^©A^P^®jif 
S^TOI P^^-yh%SMRl^t^LTfe< 0 Ctl 

t j: o , ^ 7 -y ts -\c i < (ommmm^M^ t 

I P^^'y h©^ft©^W-:^ 

LTfe<o 

[008] cnt<tntf, tffKi^^^iSK, sa© 

I P7FUX*MAC (Med i a Access C 
o n t r o 1 ) 7 Fl^X^, i3tfrfB©7'-££*>y h 

o zm&mmznrc k> , ass© t ? ns c t ^ 

(4, #%0J3©7X.r A©fM14%5S^T5 d fctfTt 

§c sft, *»f?B, MiEa¥«S5i^Stt, «a©a 



5 

rf uXi*®i:iSi1-Si: ft?, frU«©ij(P^fl 

$$Mti, ffi?#LT{£ff L/c*IS©I P h£'> 
ft < t feMflft I P 7 F U'XRtf /Xti^ft I P 7 F b 
Xtci^W^IS^LT, HMWVZh -/vr>a 
^fc^liliU *©#SLfctt£fc©I PA^yho&fc 

[009] £»©as©&g£$fci-rafc«> 

tc«, I p;^7 F<D3lffl7Cl P7Fl/X J f«I P7 

T^§) #Sg£8i:«:3iIfctf£l/\, fi£oT, ffijS^ 
KrttffilfLfcl P^yF£2!M7Cl PTFl/X&tf 
/XliJfcftI PTFUXtiD^SLTiS^-rSiii: 
"P, *ft5©I P;^hfrS#(^fc&L J f>T<£ 

?*>aj£ (h a s h i n g) fi, ^Uiff-^^I 

atttisrsfti&o^ffi-eftSo £8©y unfits* 

cttEttzmxist, ?©ftetcoi>Tfi#x.ft^c:£ 

( 1 ) ¥$SE?iJ 

C©¥i£fiiI^©T\ r-*ftatf£^ig£(C(iffifcft 

(2) V-h^ffi?iJ 

immmwz mm t\ mmi^utv^-i-t^ 
?$&imx.%<D-c\ i o g (n) aciiT-t 

too I 0 07JttOr-^T-t I o g (N) = 2 0f£<p£ 
ig^f-$fT*t.l^[c«jiT*fe« 0 -*T, r-*©t£ 

femttm (00 : V i s u a 1 Basic ©*-7- 
F-pr i n tftif) f-Mm« 
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fPAT3Lfrft<. ®a^t±N©z^©*-^-*S 
(3) 

£\ #^tiO 0 1~9 9 9(D100 OS^lL^ft^o 
COftft, fe^Di&l 0 0 0^fl©W&JMLT£ 
#^£^T^XfcLTB^iJfcAnTL£5i:^ 

£©fMn- FtifcTF©<fc 5 tft5 0 
(4) A>y->aS 

0-1 0 0 0 mmc&£®%%T 1 2 0 0 < 6^tfc 

©^X*-(?ffJD1ILfo£'X tv^OW. 3\ E?iJ 

©■*MX£l 2 0 1 fctSf 

h (n) =n mod 1021 (m o d ttMsftfc* 

30 VX^- [h (#^) ] 

S^ti 8 5 0 6 0 4 0 1 4 T'fe D , 1 0 2 1 T?fiJ -a fafc 
0 i± 7 4 6/c'*\ ffifCt^D (A7^af) ^7 4 6^ 
^5^t) Ltlftt^o Cti^ffi^ (collision: 

^AA^^L, ^^'J_h©M-y->ai±^#m 7VX 

A (f ft*) t i S a >y ^ tt t -5 '> &g 
T-fe§c *¥MOA- y LTJKT© £ 5 ftliM 

h= (. . . ((s [1] * 37 + s [2])* 37 + 
s [3] ) * 3 7. . . ) s [n] ) * 3 7 
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s 0 m& rwm&m&i £^?nM^&mt&<m 
/c>p», T-*©ftfa£*t ra?Ji«j ^LTA- r > 

£(iMi5(©{fi$£+^7^< U fil^l^tS^lc 

^nr^s. v?mm&, cm^ao 

©T-^STfcSafcffifcttOtHTCi:*^ -SO 

H *Ht© C £ A V V a & t) , A7->at 

So 12 0 1 tifgS-eS^c ^©+^Xti^f5tfW3: L 
V\ 14fllt±^OiPJffl$CJ:oTMS:S 0 f'Jffl*8fiJ©t§ 

WS<SSi!)?, &SM£f -pTtftS (ffl:#Jffi 
$9 0%) , g©1MX**t < LTT-**lStf>Btr 20 

:n*SA>y>i (rehash) 
9a A-yfa (hash) i±3IIgT* WSiJtTJ fci^ 

hashed bee f fr^vfi/^X 

[oio] ttSRfct^akfftt^n^SV^Kfti^ 

^icagT'fcS, ^CSiLTtf^clK©*!^ 30 
fit), iit£MT^/c/c'<©tfJtv\ i: 

ct*£:ft3^££ft5©luBgfcfcS¥ 

T-#£5fc^frP>JS#£7*-t:XU &Lfc^t>©£M 
oitS. ;:©££©* U 7 Hix-#©JIlW^A9 

Miiia^jil^#ft^^jST\ T-*©5fcH©£fc8 
Lfc^fe©tfi&iUf3il^ gS©Jg£tt£T©-r-* 

#ntf£l^Sfi©EStf*£<fcoT#5 0 a*, C 
©^T^UtC 1 s e a r c h 0 , If ind 0 t 

7ny5v-©[ST*«t>A^©fc5/]i$T\ 5t©*8J&tf 
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t)5fttffc:y-1-LS:<Tt±45S:t^ V< 5>tfe^^ 
S < T t. V - b ©H#R3tf frfr o T&£WK li£ < i£ < 

&5„ y- h t±-ia«^^i t> t>nf 

^fcSfcUfcottT (H^/cO) tfc&U ftiicfcDA 

ScgE5*j©^ < o^^S^ LT §o -jRWfi: (iffiaf*© 
E?imif£ST©fc$fcfU «Jfitt©*y^-T*8^l, 

r-*mrag||;W#5.ftS©T% 5te©«U$ft§Sf<:tfc 

T-ffi^ft^'i'y^y-h* ,| ffi#T-^^sSo fcK, y 

f£ c ^ ^ -y ^ y- h tijtKWr- ^ ©^attes^-r tc 
¥^wtiSiity-M-s^*™T*a<ffit>n5o 

M-y>a-9--^T-f±^SmiEMWlcii^T*fe5 0 ft 

ic x- ^ L T *3 < D ttmoiSti ^^©ST*-* 

ftt©^*-i:t5 0 ffi*ftffl©r-y;H±^®(±SSMRl 
t[iffinS^©T\ ^TSbftt©*r-^l/©ScT*lPJ 
^fc^0*HIS©*-(i:T5 o ^-^a^fSRi^ttt 

-t-7>&3©?\ *ntcs*isrsa, ^^b^ijjbs^ 
^mzmm-mu mmm^—t^ 0 ^©+-^is 

rft * s j; 5 1 * So 3#3=ai K*f t T^-rt-©* 

-ft^J D ST P,ft£©T\ ^ ©+-©ffiTttK4 if tff 
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-£itHT 5 £ It TM^ftUW, r- * OflStf 

^. S i: ^ K l^Hlft W S <t 5 1 ft S *tn? fe 

ftv\, /vyi/^-^iiWafiffiffil"^ Uf»t>, « 
feffi*fti\ ilftMiLft^lsSff&v^^ofcfflttWft io 
15 fe *S , WfcffllB L fe «fc o ft £^©3- Fftft if 

T&^t§£fcttfi«T**o CC7^7'Jtt.hse 

arch o ti^mmmM^hr^^tiK lOU 

7-7;l/£8TftV\£ftH^Sfefc& a *-*ff-gfS 
TfrdVXLm&o 75H&ftWift^©?\ iaUft^ 20 

t ft fc*^ti> t zmmfrt u 

jraft«**JB^S&Etf*3. V^i/^ftHBRldWS 

[Oil] *€tR(t«fta»(C-OV^T3fA±5. S 

*-bX^y (Port Scan) t-E^nmm 30 

S^Sl*? &C0T?«ftV^ ^©iwfM©#Pi: bTffl 

#©WaTt£§*x h-fr^ F 7-* 

tMLT, A>ry FfiOfcjfcl P7KU* J f»*&ifc#-F 
#*§£jIIMLfttf £. I P/^r-y h£HDiIL»r 

*Xb^LTf»r3 D CtitiD, 

^■TK^glJtOJUitfilfflSnTV^ I P7FUXV# 40 
-h#^£$^t3 0 ft*, CCT, huh2"#-FS*I 
t±, TCPS5V^±UDP±T?®lfft577' , J^-'>3 
>V7h*>x7<0-9--trxgli (0SAtf t elnet, 
ftp, smtp, t f t p^) £gTfc©?\ IPM 

n5r-^T*ab5o coaoa*T(4, ±ia©<fc?fti 

P/^r-y h©iMfsti, iiS, HfflWfty->W7F9x 
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ttWLT£#Lfcilu!EffiS<ai P>< 

ft< ^^©iMftTU I P7 KUXtf5V^|BHT*fi.o3& 
5t I P 7 KU*XliSB5fc#- F#WgWclft§ t© 

tfmsaw±s5 1 n i ©as©MiE#stf ft?n 
nzm 1 0Mm<Dmzmm^m?%z tmzzo 

KSyn-flood £&£*l3«£<D#S£tf£S 0 £ 
£>#$l±. TC P©#14£*'j$LT*-y r-7-^ft©£J 
^©^XF^^y?^ &©"?&§„ tftb*> tc 
PT*l±ro©*xhlirt-3fI£fT5Jg£, £t\ M*X 

©=i*f ya y^ismaTii, -?j©*X h^ffi/j© 
*XFfc*tLTSynJBl P^vb*g^t«. 
T\ iSynffll P/^ym, WfcftlX t*fcf> 
±I2-£©*XF©I P7F^t«©*XF£DI P 
7FUXfc*Wett&«7tI P7 
KUXfcLfcl P^y FT\ ^©'Vry Fft©TCP 
-vy;£"©S ynk'-v F&Q'A c ktT-y h©?-$©S y n 
t£yF©&£ r l j tLftt^T'SSc LT, 3*^ 
->a yrM^aT'ti, coSynffllP^y h*S^ 
fcffi^(D*X hti, fufS-£©*X h KiifLT Syn/ 
Ackffll PWvh&mm%o Cil-e, MSyn/ 
Ackll P/^HJ, PL<t±, J:fEflS^r©*Xh 
©I P7FUXi:-^<D*XF©I P7FbXi:^ti 
^n&fi/cl P7FUX, P7KU^tLftI P 
/^•y HT% tO/^-y h^TCP^y^SynE' 
vbfttfAckty r l j ttfttOTfeSo 

$ t, 3*^7 3 ^BBissaa'eti, C © S y n / A c 
kffllP/^y hJ&§ttftBua2-^©^XKi, tulBffl 
73©*7hiC^LTA c kffl I P/^-y h^MU C 
OAckfflIP^7 F%BuEffi^©*^F*^lt««l 
i: T% X F P^oi&aWft =" ^ 3 >©P^ft $ 
nS D ftfe, ±IBA c kffl 1 P/^7-y Ki, HL<«, 
gufeSynffll FWvbtm-vmiETil P7FbX 
SOmi P7FUX^T§ I PWvh-V* iOX 
>T v F rt O T C P-vy S y n M v \ Rtf A c k e >y 
F05*©Ac klf-y F©** r l j tbfct©"eS 

[0 1 2] fuES y n-f 1 o odHu il^i^ftTC 
P©fipttS*flfflt5**-eftSo d©*?T*t±, ^7>y 
fc-tf, ft««yo*'y F7-^©ffS©^XFt^L 
T, ttKTO«rttc^®OS y nffl I P^y F§ 

WLT±ia#^*X hfr6Syn/AckffiIP^'y 
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I P/^-yHcftT^Syn/Ackffll P^-yb£ 

Ackffl^y btfilflSftTC&MSBD, fOAck 
ffl/^Vy b©^t^#§l£&5 0 u«»<? 
fffcfcS y nffl/^y htf2HI2nT<5*fc, ±828 
£*XM4, frft&S y n|/^7F!^W;3|)-> 

y h ©titfMfisagffl©^ 7 rfnacsa LT^ 

i^y7 7®f^i!fftc&§^ HM£*XKi, T 

c p^aftMa^T c p_t©-9--tfxj!ig*fr 5 c tit 
as, cma>), ^^xh^7yr5c 

£i:£3o C©§©IjtH (Syn-f 1 ood) Ti±, 

nffl I P/Vr-y b h7-^rt©&£© 
*Xb P7KUX**rf<5**b) tWLT 

iMjf^tlT<5o ifc, CtlfcjSCT, ^ft£©*X 
bfr5*-y b7-2©flafo:fi*^>T, J£BtWJS^R#lgl 
He, 0<©Sy n/Ac kffll P/^ybtf&fl^ft 20 
§ 0 ^n6©Sy nffll P/^y bfcS^ttS 

y n/A c kffl I P;^? H^LTR&WfciluIE^ 
5£*XHcgfi£ftT<5^$A c kffl/^-y f-tf*© 
#£*XH^fi£ftTi:&l\ *CT\ *ISflT?a, 

/^■y b©?l3, fufB*y h7-^c^©ng^n7r£ 
I^Mrtfc2S®?nT*ftTCP (Transmi ss i 
on Control Protocol) tlo<I 
ROSynffllP^h^T, '>ft< £*>*©& 
jfc I P 7 K PXtf5Wc|rsI--e£S fc ©tfffi£!KJa±fc 30 
^©&S y nffl I P/Vrv b tm^M^Tt 

t c ptcg^x Acksip^7 h^Huiem^rart 

CP (Transmission Control P 
r o t o c o 1) fcg-K&aoS y n/A ckffllP 
/^7ht$oT, '>&<tfc^©£{f^I P7KUX 40 

HuKTCPtcgoXAckffll P^^M'^ 
T, SufSSSyn/Ackffll P/^-y h©j36«7t I P 
P7b*UXfc*ft€ni^©365fcI 

p 7 k bx&^iMfiTt i p 7 f ux*wrs feo^Mia 
F/r^^Mi^ftTi^^^ ^2©ai©i5i2 
tfctaarrso cne±o, s y n- 

flood fcV^n3!il2©fl^©Jj(¥£ffig|£&?J]T 
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Stffe5„ d©^t¥t±, I P/Vr7r-©^$§ (Mil I P 

77^ y h) Kmmm&ttm lt* ? b 7- 

*fc©ft£©#Xb£^7>2-£3t>©T*;&5 0 T&fr 

Tmmznz>$n~e\ ^-^©7-^Mgs*©^ 

P -y h ft S&fc U § d 1 t> 

£{i£ir?o £©fcJ6, I P/^y b©JfcftI P7FU 
x©*xb?li, #fg£ftfc-Si5©lRli; 1 P^^-y h 

a»s^snsfci» ,, 9ctt,*s 0 £©£?&;:£ 

j£>^ I Pfcg^XHfiTti, m&ifc I P'<4"y b* 
£tt$5*Xb P7 FbX©*Xb) li, mf 

ffiofel P^-ybA^e?nfet©T'S5fct, $D 
©£T©^$SSK}©I P'^-y h^gflTSST, 

iijg^©i p/^-y hmmmtZo zlt, ^t© 
^esp^©i p/^-yh*§MbT*^, *ft5*gg 

LTtc©I P/^y h©r-^^7tT§^a^?T9o 
fET e a r d r o pi±, C<D&? & I PWy h<Dft 

mimmmm&*mmz>m?$>%o c©**t? 

igg|5^© I P;^7 h£&*tt»©*v b7-^7©#S 
©*Xh{cjMfSL/c±T\ ^D©^^©lP/^7 

h£ j e©#£*xRc&frr§ 0 <i©j;5***^ft« 

©I P^>y b^gfsLfcttfc. *OIP/^vh 

fc3^57C©l P^-yb©7*-*f*tt7cLJ;5i:tSJa 
S^fr^fcto, ; e©MiItg^P B ^MT5t©t;S:§ 0 
d©ft*, It&XHi, *^±. ^77LTL£5 
Cfct4§o ^©@©I^P (Teardrop) T'li, 

© 1 P/^-y btf*y b7-*fl©f$£©#Xbfcj£fe 

ti, ^ILTffi^b/itufa^©I P^-yb©^^ 
luIST^y b 7— ?fc*©fl.g|5fr P>FJT^flrttC^fg^n 
T#ftJgfS©^SI?nfc I P/^-ybT'SoT, PI-© 

mmmj&m±.& % t % , m 3 ©fi^©t5iai5P 

tfftSnrv>Si:i:*«tfiI-rS 0 ^ntciD, Tear 

d r o P t^bns^3©a^©^*^*tc^at§ 

cttfTt3„ *tc, ^7-yyj-(cj;§^4©a^«ijj 

lt> Land tmtxmmwmtf& 

§ 0 c ©ij?¥t±, i^Mjc I P 7 K UX&tf I P 7 F 
•y b^ a*JftfeO*'y b7-^crj!ff/i©*X bfC^jg 
^©I P^y>y b ©MSt^BlS <! t 
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fcMKftl&©I P^7*y h©5^, 1512*7 h 7- ^tc 

^y r-T&oT, *©ilfl7El P7KbXtf?6$fcI P7 
KUXfc|B|-©7KUXt4orv , '5t.OS l Bf^WJU: 

«»p-rS B cntit). Land kt>%\.%>1& 4 ©HH© 10 

yn-f 1 ood> Teardrop, Land tVb 
Hftfc, D o S (D e n i a 1 of S 

e r v i c e) t^frnmm<Dimcmtz>t><DT$> 

% Q % LT, :<9Do SfCfi, S y n- f 1 o o d, T 
eardrop, La n dOKjEPfc, WAfcf Smu r f 
fcl^fctlSfflg©***, F 1 o o d i e fcl^btlftS 

©&*fcCu\ ftaWCSyn-f lood, Tear 
drop. Land fetf , Smurf^Floo 20 

d i emm*m&t%& 3 >\z.tzz.tmm*> 

7 - * wan s w* ftmmrnmmi?, ma t 

%o ssvm±, iuiemam^T^rai, fuia#sfc 
a^sa^a LrcmmmmmmmMfi i p 7 f 

UXRtf/Xfi&fl: I P7FUX£*Tt5 I P'Vry h 30 

[oi4] MM7noy%i^Lm 

LTti, LINUXOkernel-coding^i 

ffiLft 0 lot, os©«£»e-f, asK^- 
7h©iMt;£X«v^©^of;: 0 -$tc jy$- 40 

7x--X£© J f>!)i:!)liOS©±g&f±#?£9, OS 
©#Jffl#«*ft%>f7£-7x-x©tt^fctf7*;i'--f- 

unix (i^no a— »f-[c(i^ri^nTi^v\ 
wi * tf >« * u -wait 1 7 7-t XI- sam&tt < 4 
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■??©i«i§1£H:Wt*fc£, fc^-5©l±, SftSi^ESfc 
jg<fcfc. ABIKfcoTS^V^gao^KI (fflfctf 1 
~2fj>) ©ft£, IBStSS-frtf^T'SofeA^T'S 

/l 0 0 0#HJt) tc, £MLTj£»rr5&gtf£ofc 
fci&, a^07;f/3UXAfej;0\ UjI©7W7A^ 

i£T*J!yi©££7;l/fc:£ rtr- LftSn^ai*^ -3 T ^ 

T5©-r*fe5 0 ^y£-*-y h©&¥, ^nfelffcDo 
S t=hft%im^mt%£li, -5£©RflSrtK£3 

JB£©I8:£tf&£fc*£. 
[0 l 5] 

mmvmmmm *wm~wmm*m 1 

figLTWWtSo m 1 tt*^l^H©^Xr ApflStHT- 
SSo Ili;*5^Tv l(i**y h7-£i:LT©L AN 
T?3&5. MLANKi, MAtf-r— h (»»« 
flj) (Ethernet <S§*j&g0 ) fcffl^TffiSS? 
tlfc *>©?*!?* HS*tttr*«ftO*^ b 

-^VtSH«t*-r— h • *-F^ T C P/ I 
P©JHI*ff3fei&©y7h'>x7, TCP/IP±T* 

tttg-T 5£ffl7 7 U -7 3 y 7 7 h 7 x 7 (fl»J A tf, 
telnet, ftp, smtpf) A^3S$n, I P 

icS-^iHSfcRreifcLT^So Sfe, LAN Hi, ^ 

-n-yb ±t«$ nft t, © t ps s i\ h - >? y y > 
7H, ffl©miT-^^n/ct©T-s^Tt i^o 

JgJ^IS©'> AT*t±, L A N 1 ©X*3 nt, /^7-y h 
7 y i: LT ©7 7 >f -V 7 * -)\/<r>m&£ t> fc-ftfe 

>lfa:-^2 CUT, ^3ytfa-^»77^ 

^7*-;l/2i:^-r§) tfSitenTv^s,, ^LT, L 
an ni77-r j r7t-^2^LT^y^-*'y b3 
fcgg^nri^c 77^-V7*-;v2(i, if©<t9& 

g^(7)I P^^r-y h©LAN 1 ^©jlAfctSitTSfrfc 
jB£t5r-^3t*«#*aStl577-1 , ;l/ CUT, 7^;U 
^£77^;l/ii^) ^WLTV^So ^LT, 77^ 
+9*-;l/2li, C07Y^»£77>f;l/T?, LAN 
1 ^©IXtfMitSftfcgSI© I P^7-y hftW7^- 

u toRfsiSs i -j- t a m i .a i torn .t--;*- Z ifc-fv -» ^ 
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F3£©fgfcU:, A74^i?tl, u0M74fc#* 
Sft, £©-fey+f5K:[i, 15157 7^7:+-/!'' 2 £HiiJ 

-tvy-Stcti, t c pdumptvt)tiSV7h 
-7x7^S$nr^S 0 ilOtcpdurapiao 
T» m74£S5£T© I P^^-y h^— y-^'y Fft 

§ 0 CflDJcdfcftfNi. 7n^X-*-vX-*-F (p 
romise cast mode) fcVfcflS Cfctf 

fit, -tvu-sti, mfc^ip^'vh* 

X^iaiiffi&tS^KLTV^o 4fe a-Ft^ 

X^fcEttfiHfrrSo tfc, -fey*5i±, IP7KUX 
£jf feT, ARP (Adress Resolutio 
n Protocol)- 5 ?, RARP (Reverse 
Adress Resolution Protoc 

o i) 0><*yh5, jssfcflet/Vry h^fs^nx 
wtsjesnT^s. ost>, -t>i?-5tti p;^7 h 

$P.tc, -fe>^5Ui, fui$L/c^l~£6©fl 
^©£g£&ftT3fc&©y7F7i7 CWT, #wa 

^ 6 fc©T-#g££frl^ofg#¥fcfc]77l/:i 
U XAOMS^-tr y^ 5 [c|t^-^§ cfc r> fc LT fc «t l\ 
fusErV U £ * 6 ic Si, fu=S7 7 -Y ^7 * 2 5 « 
t377b7x7 (WT, 7Y^^W7;l/d"'JXAi: 
^■5) tf*g£tiTi>5 0 c©it£, 7^3«7/b 
ri'JXAii, ^ytfSfciDfcfcSnsftSUSCT, 40 
fl5f B7 >r /i/ xlS;£7 7 -Y n/oyf- $ fciggS t %> z 

tt*, fgIr]7 7^7*-^2 Wf$T3&©T*&£ 0 
[o l 6] 

m-F7Vx^IE<I£8Loo, m<DWr)W 

/\~ F7V x7^m£©B#m^©^&© ip^ 

■y F aMffjt I P 7 F UX&tf I P 7 FbXOl 



If 1 2 0 0 2 - 1 2 4 9 9 6 
16 

*IP^7bitH). fit, co^^'JKISlt) 

&A,£«a©i p/^-yncJtLT, &M-r 

OfflSi*ffoft±"lf. ^ti5>© I P'^v Ffc^tUfr 
BMit § 0 &iM£;i/*'YAfc::fc^T, * 

tutc&D&tyi p/^vHi, i5@©^M7;^-fA 

"ejttyfcfcS&AJei P'Vrv h05 5©ftt>#lM 
P 7 <y -y F ©!Tf#B#Mfr 5 jff^H^&iB L fci$£iJtH£ 

m i ~s e ©ggj ©&s© 5 5 , en * if, as i ©afi© 
-r&t>*»t°-Fx++y^ar§BJS^iT5 0 

c©jfflSTti, -trytfSti, ^tUKMacfc^tlRO 
jAAJcI P^^-y F©?5, SflS I P 7 F UXtfW- 
il^iMflTt I P 7 F bXtf L A N 1 ©Hgfl©&© 
I P/^V F^iC^tL, ^©§ I P^v hfflf 
tC^Stl§I P/^7h^t5^TO^I P7FU 
X©ffi (CtlttL AN lfc»t« I P7FUX©filT*S 
S) ^fttii-r^c ^LT, ±I2©#I P^'>M¥l?tt 
WLfcjaftl P7FUX©*fil(cWU P/^7 
hl¥ (|ai— P7HUXOI P^-Jryhffi) ^ 
6, ^3fe5tl P7FbX©fEi:^l-©^I P7FUX 
^WL, fioTCP^^^SiHiUDP^-y^rt©^ 

FX+^y©ij?**^^nT^Sdt^ai-S 0 

P/^-y M¥©JMfHKiI P7FbX©ffir-^i:^ (U 

taxf l^*6lc5a.3 0 ii©J;9^SaiI^M7cI P 
7 F bX^fSI-T\ fiO^ffS I P 7 F UX^ LAN 
1 (CgSftl^T© I P'^7 h^icMbll^fT^n 
5o ft*, *W»4olt5^-FX+^>©^T? 
ti, 3j?-h#^SV^*5I P/^ry h©»£A 
7 y F 1" 5 «fc 5 tc U ft tf, iyT© J: 5 ft jUtat <fc D ^- F 

x*+y£&fcrr5<fc5£LTt>J;i\. 1"ft^5, Mfg 
tci P7Fux^ra-r\ mmitfui p7fux 

L AN l^©t©-eS§#I P/^-y FSffc*fU 

^■©^ i p^^-y bmcmnz i p^y-y h^w-rs 
^T©^t-bf^i«f^ 0 ^e©a 
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7 y b Sff ffi^SfcS t rdg£fc#- b X* * > A^frto 

KUXfc|S|-©S€7nI P7KU***rrS I P^Vy 
btf L AN l t3gAT5<D*sa*^3r£itfa (fllfctf 
5#lffl) Pfl±T3i9^MIS7 7/ir7*-/t'2<7)7^ 

*-;b2J±, ±|HiMf7cl P7FbX££T£ I P'<^ 10 
ybaV>*~*vh3fr5iM4I£*rC<5^ 
P^^7h5SiU LANl'\OJiA*ia±1"2>o C 
nici;D, #-bX*?V0£2fr5LAN lftMSfl? 

3WKii-5i7©ratu, ittc^A en/i® 1 

601 P/^-y b©LANi^©jfSA£KiL1"8<fc5ti: 

77^'V^t-;l'2 tot, t-f^t 20 

l\ fLT, f^^^6i±, ±CBt£I*IBI (5#IHD 
JKJfltS $ Tic, UIHH 1 iJ^ftr-* 6 

7Cl P7FUXft^cQI P/^ybOLAN 1 ^\<D1A 

|(Syn-f lood) OfcfclftUifcfi^o 
[0 1 7] d(DffiaT*tt, •b>^5(i. ?65fel P7FU 30 
XtfU-TfcS I P/*5ryb»©55, LANHcST 
SJSJt I P7FUX<9&I ?^>r>y MSffcftU mi P 

^J«gtc(i;^«iWt5 0 ^LT, fflftLfc&Synffll 

p^y btDmrnrnfrmiffiw (mif2W) 

M#£ft/cS y nffl I P/^r'y b£\ EUJBJfcl P7 
FUXOI P;^y b£rtfc#£?Sfr3fri*<5 0 * 
LT, fOi^Synffll P;^*y btf#£TSJg£ 
icti, 5t(C}fitiiLfc S y nffl I P/^>y bt^T^tl 
5©SynEI P^yb©ffl»**^>F1"3. 40 
tc, ^O^^bLfcWfttOS y nffl I P/^7 b 
td#LT, ^ft^nt-ttJSlTSA c kffl I P/^r-y b 
(f¥L<(3:MS y nffl I P/^-y b tm-n&fart I P 
7Ft"X£*U R-O, MSy nffl I P^fKOTC 
P^>y^[f©^-^yX#^©^©i/-^>X#^W 
t5Ac kffll P;^7F) ffiot, fioMSynffl 

i p^ybmmmftztmmm urn® a 

fcfcf#£nfcfe©tf, P7FbX<DI p^y 
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S, ±ia©* , ?>bfs% r i j doa^s-es. 

T\ WtS-TSA c kffl I P^^-y 

p^Kt>ofefc*£ ^OA-y-^bStfffiiEa 
1 6M) W±*efeS«^t«4, Syn-f loo d 

fc, COR»A^flJ$tifcS ynffll P^'T-y bOJMM 
7cl P7F bX©fiir-*2itf?5ft I P7 b* bXcDfJr 

# fc ^ 3 ) Biffi-r^ 1^*6 

35ft I P 7 K U^IrI-T', EoMylrn I P 7 b bX 
tfLAN lfcJgtS^TOl P^y bgH-ttLTlf^! 

fifcna. *iwf§?^ synffli p^y-y 

b<Q«)(tg-jVTS y n-f 1 o o dfctfcfclLfctf, 

^oio^saatciD s y n-f i o o d£&arr5<fc 

5KLTt.«t^o tftfc5* iMff 7t I P7FbXtf|WH 
T'fiO, Kj&Stc I P7 FUXtf L AN 1 I 
P^v-'yUffi^L MI P^^-yb^#StiSSy 
n/A c kffi I py^«y b^^©W#^iJJi^lir»tU 
1"So *^T, atUbfc#S y n/A c kffl I P^^r-y 

b<ow#BfsiJ^&p/T^n (M^tf 2W rt^mn^ 

nftSyn/Ackffll P/^bff, IMU^faTCl P 
I P/^-y MffP3K#ftT5*^W^*o 

COfc^ ^(D^d^S y n/A c kffl I P^^r-y b# 

#fiEtS*^ta, ^ttttbbfcS y n/A c kffl I P 

f\*rv bi^ftT^n^OS y n/A c kffl I P/^'7 
b<Df@^*7yh1-5o bbft* 

n^fnoSyn/Ac kffll P^vKcWUT, MS 
y n/A c kffl I PtVry bOiMMjtl PTKUXfcRI 

-Oj6JtI P7HU^OI P^-yhS*iK*» ccd 
fct, MS y n/A c kffll P^-Jr-y bfcWJSTS A c 
kffll P^^7 b (PIXfiMS y n/A c kffl I 

^r-y bO^flTtl P7bbX^^-O^I P7FPX 
^WL, fio, MS y n/A c kffl I P^7bDTC 
p-N-y^cO~>-^>X#^©^©A c kS^^TS 
A c kffl I P/^'y b) T'JoT, fi^MS y n/A c 

kffl i p^y-y btDmmMt^i.M^t.nm (z® 

K) rttffil^^nfcfcW SMI P^-!r-y bPP3K# 
atSfrSfr^H^So ^^^^ ftDj;3&AckfflA 

y-yb^fits^tc^ tm^yv 

SSt* rij ^oM^JtirSo ^LT, ft*|fl*jK, i*jSt 
SAc kffll P/^-y b©ffffi*li^**fcofei:flc± 

^ttt. Syn-f I ood<0#Stf&SftTV>5i:i: 

[0 1 8] 443, £©«£(c-try'9-5*P67VU2*6 
{t^JtSr-^ti, Syn-f 1 ood<oa**«flJL 
fctfc^ff-^t ±32 S y n/A c kffl I P/^r 
•y b 0>m 7C I P7K bXOflr-^SOm I P 7 F 
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P7FUX©fiSr-#fcl, ZftZft, StESWLteWE 
£2ffl&¥#&nr-*fc*itt5S y nffll P^7h« 
5tl P7FbX«{Ix-^ 3H1tcI P7FbX©{I7 

*6i±, ism2aiSf*^r-^^^n§^{M7ci p 

7FUXfc^-©3Hl7uI P7FUX£*?5 I P>^ 
7 t-^L AN l tlAt§©£^£^P/T/MI 
i£ 2 ft®) mtt 5i7 tcSufB7 r ^ 7 *-;F 2 ©7 
-r;i/?f§£7 7^;F£»t$*-3o |W|i$t, 10 
6tt, H2aaSt^lr-5'C^JnS^I P7FL' 
XfcH-©3fc5fcI P7Fb^**r« I P^-yFtfL 
ANltlAT5©£Kftfr5rffi£flS!ffl (M^tf2» 

7 7 4 1\>*.%*.&X%* £©££> 77^^7*-;b2 
(i, ifBSffjSI P7FUX**rT3 I P^fh, * 
3W±±aB36ftI P7FUX*#T5 I P'^>y bt>U 

FfcJKSIU LAN l'\©jiA^PIihT«. 0 th£± 

t), Syn-f I ood©#*fr6LANltf<S»Sn 20 

state EKoawowfttsnTv^i P7Fu^o 

*x F*W y-&ffcEtftt»fc*»t « c fctf if t 
7FUX***S I P>*5"y h©Sfl^(c^S±^m^ 

2 mmm\T- * t ®-<d% 2 a^sa^r - 2 # -t 

H (2ftM) , ^2«#¥ia3nT-*©j£{S7nI P7 
FUXfr£©I P^7 F©LAN 1 'MDlA^PMT 30 
5J:5fr77-Y-V9;J--A'2£»T5 0 C^tti, 
£2g#S£fc&]T-*K:J3ttS3&jfcI P7FUX*£T 
§ I P/^r>y F^Eto^TtPfTeS^ f^T, 
Syn-f 1 0 0 dCD&mtfm^T^URt), *©£? 
KftSaHBSI P7KUX**5©I P^fK 
li*©&St$S3S£l P7FUX'\©I P/^7h 
(i, LAN 1 KlA-fSCfcliT?* £*\> fLT, f*V 
l^*6(i, ^2ffllSi»^Pr-^tr^ltS^H^I P 
7FUX£*rT5I P^>yF«£ffit, SzSftSft 
ftf-^tfetf^ftl P7FUX^fSI P^y 40 

mimm (2m 2^ agists s-et, tuia 
n 2 a^s^r-* # 4* snaa^rdB^Eii, 

CD^ 2 gi^^T-^<7)^i7C 1 P 7 F WT* 
I P/^r>yK fe*^l±, 82ffl&«*fclT-*©3ejfe 
I P7FbX£frf£I P;^r-yF©LAN 1 ^OlA 
©BBlhSdlBStSc RU$© £ 5 £ S y n - f 1 ood^ 
&S©fcfc*!liI£tTo 5 ti, ^3 ©SSI 

,n*« (T ~ A > rtM^tnftllOTfc^ y mhll 
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P/^7h»©5^ LAN lfcSfS^jtl P7FU 
XO^lP^^'^MU MlP;^yF$£^£ 

nstffssnfci p/^7h cut, #e^y 
bt^o) zmmmzo c©*§£\ i pm #8 

/^yMt £©I P^\-y^O^c077^ r l J 
t&oZ^Z>b\ tL<l±, 7^^>'F*7-fe'y Ft 
v*feft3r-*tf roj iD^tfcffifcftoT^S,, c 
Wc«fc!K ^g/^'yh*MWtilfcA^t5 D *L 

tt/<<Jr«y Ft I P'vy^ip© I P W^M^T^ 
>F*7-t'y hOfilJb^n^l^-ffeSt© (WffiL 
fcftg^yFt|W|-©#ii'^yF) b\ mftfavr 

y vtmv\ Mfrtfc*«fr*ai"<So £©t 

*©.fc3 Ftffc**£fcli, jfctffifti 
Lfc^^-y h^fcT^n^o^H'^'y b©« 
^*7VLf§. fLT, c:©a7yF»tff?T5&8[ («« 
^tf 8 0f@) W±T**5Ji^li:ti. Teardrop© 

zt, zmmffmznrzftW'rvbomTt'ip 

7 F l/*©fif *B5fc I P 7 F bX©flr-^ i: 
§ (JWT, cti5©r-^*S3aa**ftfi3r-^t^ 

I P 7 F L-X/jH^J -T\ a^^^t I P 7 F UXtf L A 
N 1 tJKfS^T© I P/^7 h8¥(C^LT)iMf^n 

-^-^^ftfcMaarV l^6&, SulHSyn-f 
1 oodft^ft]?nfe^i:^<IBIi;^*3?7T% 7 7-f 

^^^Sti^JiflTtl P7FLXt^-©jMfl7tI P7 
FbX*#r5 IP/^yhBANl KiiAtS©« 

saft^m^^ra (2#n) PMt-§ ( t9£Mf27 7^ 

;l/2©7^;i/^l8^7r>r;l/*»tS!^So P 
1ft, l3W^f-^i^Jn5^I P7Fb 
Xtl^-©jeitl P7FU^*WtS I P^7 F^L 

an i tiA-rsw^gi&^e.fffOTi (2#ra) Raih 
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